22-16
Catalyst 3750 Switch Software Configuration Guide
OL-8550-02
Chapter 22 Configuring DHCP Features and IP Source Guard
Displaying DHCP Snooping Information
Displaying DHCP Snooping Information
To display the DHCP snooping information, use the privileged EXEC commands in
Table 22-2
:
Note
If DHCP snooping is enabled and an interface changes to the down state, the switch does not delete the
statically configured bindings.
Understanding IP Source Guard
IP source guard is a security feature that restricts IP traffic on nonrouted, Layer 2 interfaces by filtering
traffic based on the DHCP snooping binding database and on manually configured IP source bindings.
You can use IP source guard to prevent traffic attacks caused when a host tries to use the IP address of
its neighbor.
You can enable IP source guard when DHCP snooping is enabled on an untrusted interface. After IP
source guard is enabled on an interface, the switch blocks all IP traffic received on the interface, except
for DHCP packets allowed by DHCP snooping. A port access control list (ACL) is applied to the
interface. The port ACL allows only IP traffic with a source IP address in the IP source binding table and
denies all other traffic.
Note
The port ACL takes precedence over any router ACLs or VLAN maps that affect the same interface.
The IP source binding table has bindings that are learned by DHCP snooping or are manually configured
(static IP source bindings). An entry in this table has an IP address with its associated MAC address and
VLAN number. The switch uses the IP source binding table only when IP source guard is enabled.
IP source guard is supported only on Layer 2 ports, including access and trunk ports.You can configure
IP source guard with source IP address filtering or with source IP and MAC address filtering.
These sections contain this information:
•
Source IP Address Filtering, page 22-17
•
Source IP and MAC Address Filtering, page 22-17
Table 22-2
Commands for Displaying DHCP Information
Command
Purpose
show ip dhcp snooping
Displays the DHCP snooping configuration for a switch
show ip dhcp snooping binding
Displays only the dynamically configured bindings in the DHCP snooping binding
database, also referred to as a binding table.
show ip dhcp snooping database
Displays the DHCP snooping binding database status and statistics.
show ip source binding
Display the dynamically and statically configured bindings.
Содержание 3750G - Catalyst Integrated Wireless LAN Controller
Страница 80: ...1 28 Catalyst 3750 Switch Software Configuration Guide OL 8550 02 Chapter 1 Overview Where to Go Next ...
Страница 606: ...27 8 Catalyst 3750 Switch Software Configuration Guide OL 8550 02 Chapter 27 Configuring UDLD Displaying UDLD Status ...
Страница 670: ...31 18 Catalyst 3750 Switch Software Configuration Guide OL 8550 02 Chapter 31 Configuring SNMP Displaying SNMP Status ...
Страница 1048: ...41 20 Catalyst 3750 Switch Software Configuration Guide OL 8550 02 Chapter 41 Configuring MSDP Monitoring and Maintaining MSDP ...
Страница 1086: ...43 26 Catalyst 3750 Switch Software Configuration Guide OL 8550 02 Chapter 43 Troubleshooting Using the crashinfo Files ...
Страница 1104: ...B 4 Catalyst 3750 Switch Software Configuration Guide OL 8550 02 Appendix B Supported MIBs Using FTP to Access the MIB Files ...